Add Category
Optus has been hit by a cyber attack that has compromised customer information, the telecommunications company says in a statement.
- Customers' names, dates of birth, phone numbers and email addresses have been exposed
- Driver's licence or passport numbers have been exposed in some cases
- Optus says the attack has been shut down
Information that may have been exposed includes customers' names, dates of birth, phone numbers and email addresses, Optus says.
For some customers, addresses and ID document numbers such as driver's licence or passport numbers have been exposed.
The company says it has shut down the attack, notified the Australian Federal Police, and is working with the Australian Cyber Security Centre on the issue.
"We are devastated to discover that we have been subject to a cyber attack that has resulted in the disclosure of our customers' personal information to someone who shouldn't see it," Optus CEO Kelly Bayer Rosmarin said in a statement.
Optus says it does not know if anyone has suffered any harm as a result of the breach, but they have encouraged customers to have "heightened awareness" accounts.
"Including looking out for unusual or fraudulent activity and any notifications which seem odd or suspicious," Ms Bayer Rosmarin said.
Payment details and account passwords have not been compromised, Optus said.
Minister for Cyber Security Clare O'Neil said the Australian Cyber Security Centre was aware of the breach and was providing advice and technical assistance.
The Australian cyber security organisations have seen broad targeting of Australians and Australian organisations by state actors and cybercriminals seeking to steal sensitive data.
Optus said it has notified the Australian Federal Police, the Office of the Australian Information Commissioner and other regulators.
More to come